from django.contrib.auth.models import AbstractBaseUser, PermissionsMixin, BaseUserManager
from django.db import models
from django.utils import timezone
from django.utils.translation import gettext_lazy as _
from django.contrib.auth.hashers import make_password, check_password

class CustomUserManager(BaseUserManager):
    def create_user(self, mobile_number, first_name, last_name, password=None, **extra_fields):
        if not mobile_number:
            raise ValueError('The Mobile Number must be set')
        user = self.model(mobile_number=mobile_number, first_name=first_name, last_name=last_name, **extra_fields)
        user.set_password(password)
        user.save(using=self._db)
        return user

    def create_superuser(self, mobile_number, first_name, last_name, password=None, **extra_fields):
        extra_fields.setdefault('is_staff', True)
        extra_fields.setdefault('is_superuser', True)
        extra_fields.setdefault('is_active', True)

        if extra_fields.get('is_staff') is not True:
            raise ValueError('Superuser must have is_staff=True.')
        if extra_fields.get('is_superuser') is not True:
            raise ValueError('Superuser must have is_superuser=True.')

        return self.create_user(mobile_number, first_name, last_name, password, **extra_fields)

class CustomUser(AbstractBaseUser, PermissionsMixin):
    USER_TYPE_CHOICES = (
        ('customer', 'Customer'),
        ('vendor', 'Vendor'),
    )

    KYC_STATUS_CHOICES = (
        ('pending', 'Pending'),
        ('approved', 'Approved'),
        ('rejected', 'Rejected'),
    )

    ROLE_CHOICES = (
        ('user', 'User'),
        ('pincode_head', 'Pincode Head'),
        ('district_head', 'District Head'),
        ('state_head', 'State Head'),
        ('vertical_head', 'Vertical Head'),
        ('vendor', 'Vendor'),
        ('admin', 'Admin'),  # optional if needed outside superuser
    )


    mobile_number = models.CharField(max_length=15, unique=True)
    email = models.EmailField(blank=True, null=True)
    first_name = models.CharField(max_length=30)
    last_name = models.CharField(max_length=30)
    profile_pic = models.ImageField(upload_to='profile_pics/', null=True, blank=True)
    user_type = models.CharField(max_length=10, choices=USER_TYPE_CHOICES)
    role = models.CharField(max_length=20, choices=ROLE_CHOICES, default='user')
    referral_code = models.CharField(max_length=20, unique=True, blank=True, null=True)
    referred_by = models.ForeignKey('self', null=True, blank=True, on_delete=models.SET_NULL, related_name='referrals')
    district = models.CharField(max_length=100)
    state = models.CharField(max_length=100)
    city = models.CharField(max_length=100)
    pincode = models.CharField(max_length=10)
    kyc_status = models.CharField(max_length=10, choices=KYC_STATUS_CHOICES, default='pending')
    login_pin = models.CharField(max_length=6)
    transaction_pin = models.CharField(max_length=128, blank=True, null=True)
    biometric_enabled = models.BooleanField(default=False)
    agreed_terms = models.BooleanField(default=False)
    is_active = models.BooleanField(default=True)
    is_staff = models.BooleanField(default=False)
    date_joined = models.DateTimeField(default=timezone.now)
    pins_set_at = models.DateTimeField(blank=True, null=True)          # ← first-time completion timestamp
    pins_email_sent_at = models.DateTimeField(blank=True, null=True)   # ← when we emailed (optional)



    objects = CustomUserManager()

    USERNAME_FIELD = 'mobile_number'
    REQUIRED_FIELDS = ['first_name', 'last_name']

    def set_transaction_pin(self, raw_pin: str):
        # expect exactly 4 digits, validate upstream
        self.transaction_pin = make_password(raw_pin)

    def check_transaction_pin(self, raw_pin: str) -> bool:
        if not self.transaction_pin:
            return False
        return check_password(raw_pin, self.transaction_pin)

    def __str__(self):
        return f"{self.first_name} {self.last_name} ({self.mobile_number})"

class PinHistory(models.Model):
    user = models.ForeignKey(CustomUser, on_delete=models.CASCADE)
    pin_type = models.CharField(max_length=11, choices=[("login", "Login"), ("transaction", "Transaction")])
    pin_value = models.CharField(max_length=4)
    created_at = models.DateTimeField(auto_now_add=True)

    def __str__(self):
        return f"{self.user.mobile_number} - {self.pin_type} - {self.pin_value}"